| 1 |
On Thu, 2003-10-16 at 03:30, Boyd Waters wrote: |
| 2 |
|
| 3 |
[snip] |
| 4 |
|
| 5 |
> |
| 6 |
> I ran into problems with new glibc and gcc and stack-protector; the |
| 7 |
> default configuration (as well as the hardened-gentoo-stage3) cannot |
| 8 |
> build static binaries. |
| 9 |
|
| 10 |
hardened root # gcc -o scanexec scanexec.c -static |
| 11 |
|
| 12 |
hardened root # file scanexec |
| 13 |
scanexec: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), for |
| 14 |
GNU/Linux 2.4.1, statically linked, not stripped |
| 15 |
|
| 16 |
hardened root # gcc --version | head -1 |
| 17 |
gcc (GCC) 3.2.3 20030422 (Gentoo Linux 1.4 3.2.3-r2, propolice) |
| 18 |
|
| 19 |
hardened root # ld -v |
| 20 |
GNU ld version 2.14.90.0.6 20030820 |
| 21 |
|
| 22 |
-------------------------------------------------------------------- |
| 23 |
|
| 24 |
gcc-3.3 is known to not be able to build static bins properly, but 3.2.3 |
| 25 |
should be able to build them no problem. |
| 26 |
Also the 3.3 should be masked in the profile so I don't see how you |
| 27 |
really could of ended up with that. If that's what going on then |
| 28 |
downgrade to the stable version of gcc. |
| 29 |
|
| 30 |
/usr/portage/profiles/hardened-x86-1.4/packages |
| 31 |
# we lock the user into the stable version of gcc even when ~arch flags |
| 32 |
are used. |
| 33 |
*>=sys-devel/gcc-3.2.3-r2 |
| 34 |
*<sys-devel/gcc-3.3.0 |
| 35 |
|
| 36 |
|
| 37 |
Also note that current 2.4.2 version of hgcc has problems when building |
| 38 |
ELF's as ET_EXEC http://bugs.gentoo.org/show_bug.cgi?id=31287 |
| 39 |
|
| 40 |
Downgrading also fixes the problem of not being able to build proper |
| 41 |
ET_EXEC executables. |
| 42 |
emerge =sys-devel/hardened-gcc-2.4.1 |
| 43 |
|
| 44 |
|
| 45 |
|
| 46 |
|
| 47 |
> -- |
| 48 |
> gentoo-hardened@g.o mailing list |
| 49 |
|
| 50 |
-- |
| 51 |
Ned Ludd <solar@g.o> |
| 52 |
Gentoo Linux Developer |
Archives